”A report without the subject’s consent would be unethical.” Vulcans monitor other species without their consent all the time, such as in “Star Trek: First Contact”, “The Andorian Incident”, and “Carbon Creek”.
While T’Lyn might just have made it up on Tendi’s behalf, the most recent of those incidents occurred in 2151 (The Andorian Incident). Perhaps Vulcans have modified their code of ethics in the 200+ years since then.